Appl. No.: 10/787,501 PATENT 
Amdt. dated: April 21, 2006 

Amendment under 37 CFR 1.116 Expedited Procedure 
Examining Group 2 1 87 

REMARKS/ARGUMENTS 

Claims 25-30 are pending, and are rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Vahalia et al. (US 6,275,953) in view of Yachida (US 5,802,591). 

Applicant respectfully submits that independent claim 25 is patentable over 
Vahalia et al. and Yachida because, for instance, they do not teach or suggest that the storage 
system includes a LUN security function therein so that a predetermined host computer of the 
clustering system can access at least one of a plurality of logical units in the storage system, 
and changing access control information in the storage system, by the storage system using 
the LUN security function located therein, for disabling the primary host computer to access 
the at least one of a plurality of logical unit and enabling the secondary host computer to 
access the at least one of a plurality of logical units based upon a request for changing the 
access control information from the management computer. 

In the claimed invention, the LUN security function in the storage system 
controls access to the logical units in the storage system. See Fig. 2 and paragraphs [0022]- 
[0023] and [0032]. The storage system, using the LUN security function located therein, 
changes the access control information for disabling access and enabling access based on a 
request for changing the access control information from the management computer. 

In Vahalia et al., the storage subsystem 23 includes file authorization and 
ownership 115. "The read-only cache of file authorization and ownership 107 caches file 
authorization and ownership information 115 stored in the cached disk storage subsystem 23. 
The file authorization information originates from a particular client that first created the file, 
although the file authorization information could be changed by the system administrator or 
another client having authority to change the file authorization information. The file 
ownership information includes an indication that a particular data mover owns the file, and 
this data mover ownership originates from the display and keyboard server 28." Column 15, 
lines 52-62. The authorization and ownership information 1 15 is merely information stored 
in the storage subsystem 23 relating to authorization and ownership. It is not an LUN 
security function that controls access to logical units in the storage subsystem. In Vahalia et 
al., the authentication module 104 for authenticating the client request and the authorization 
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module 106 for authorizing the requested file access reside in the data mover 101. Therefore, 
the storage subsystem 23 contains no LUN security function, and does not change access 
control information for disabling access and enabling access based on a request. 

The Examiner cites Yachida for allegedly disclosing an LUN security function 
physically located in the storage subsystem. Applicant notes that Yachida does not cure the 
deficiency of Vahalia et al. because Vahalia et al. does not even disclose an LUN security 
function. Moreover, Applicant believes Yachida also fails to disclose the LUN security 
function as claimed. 

For at least the foregoing reasons, claim 25 and claims 26-28 depending 
therefi-om are novel and patentable over Vahalia et al. and Yachida. 

Applicant respectfully submits that independent claim 29 is patentable over 
Vahalia et al. and Yachida because, for instance, they do not teach or suggest that the storage 
system includes a LUN security function therein so that a predetermined host computer of the 
plurality of host computers which include the primary host computer and the secondary host 
computer can access at least one of a plurality of logical units in the storage system, and 
changing the access control, by the storage system using the LUN security function located 
therein, so that the storage system permits access to the logical unit fi-om the secondary host 
computer based upon a request fi-om the management computer when the secondary host 
computer takes over processing of the primary host computer. 

As discussed above, the authentication module 104 for authenticating the 
client request and the authorization module 106 for authorizing the requested file access 
reside in the data mover 101 in Vahalia et al. Therefore, the storage subsystem 23 contains 
no LUN security fiinction, and does not change access control to permit access based on a 
request. Yachida does not cure the deficiency of Vahalia et al. 

For at least the foregoing reasons, claim 29 and claim 30 depending therefrom 
are novel and patentable over Vahalia et al. and Yachida. 
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CONCLUSION 



In view of the foregoing. Applicant believes all claims now pending in this 
Application are in condition for allowance and an action to that end is respectfully requested. 

If the Examiner believes a telephone conference would expedite prosecution 
of this application, please telephone the undersigned at 650-326-2400. 



Respectfully submitted, 

Chun-Pok Leung 
Reg. No. 41,405 

TOWNSEND and TOWNSEND and CREW LLP 

Two Embarcadero Center, Eighth Floor 

San Francisco, California 941 1 1-3834 

Tel: 650-326-2400 

Fax: 415-576-0300 
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